Vulnerability intelligence

CVE-2025-31200

Apple Multiple Products Memory Corruption Vulnerability

Apple Multiple Products

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1, watchOS 11.5. Processing an audio stream in a maliciously crafted media file may result in code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS released before iOS 18.4.1.

CVSS Score

9.8

Critical

EPSS — Exploit Probability

19%

Riskier than 97% of all CVEs · checked 2026-10-09

Exploitation

Confirmed in the wild

KEV since 2025-04-17

Remediation

unknown

Federal deadline 2025-05-08

CISA required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Deadline for federal agencies: 2025-05-08.

NVD entry PoC / advisory CISA KEV

1 article across 1 outlet · first covered Oct 9, 2026 · latest Oct 9, 2026

Coverage timeline

P7 DarkSword iOS Exploit Adds Stealthier Keychain and Crypto Theft
thehackernews.com · Oct 9, 2026

Related CVEs — Apple

CVE-2025-24201KEV CVE-2026-86950KEV CVE-2026-43682 CVE-2025-24200KEV CVE-2026-86869 CVE-2026-84543 CVE-2026-43786 CVE-2026-43783